I do this for my parents, but it's a pain in the butt how often it expires. Every few months I get a call and I have to manually ssh in and fix. There is no auto renewal. I guess I could setup a script, but I wish talescale itself could do it.
I opted to use cloudflare tunnels for this, using a cloudflared docker container running on the NAS. SSL is handled automatically through cloudflare, and it's free.